Which of the following describes a concept that requires using a combination of an ID, a password, and a biometric?

Types of security is a broad category and does not specifically describe combining multiple authentication methods.

Access control refers to managing who can access resources, but it is not the specific concept of combining multiple authentication factors.

Principle of least privilege dictates that users should only have the minimum necessary access rights, which is unrelated to the method of authentication itself.

Multifactor authentication (MFA) is a security system that verifies a user's identity by requiring two or more distinct pieces of evidence from different categories. These categories typically include something you know (like a password), something you have (like a phone or token), and something you are (like a fingerprint or facial scan).